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Amendments to the Claims 

1 . (Currently Amended) A granting method (fi>-to grant a modification device 
(£)-a modification right to modify an application in a data carrier-(S), wherein the 
following steps are carried out: 

generation of a first key information item (Kl) and of an associated second 
key information item (K2) for one or more data carriers fS)-identified by a data carrier 
identification information item (ID) ; 

granting of the modification right for data carriers (S)-identified by the data 
carrier identification information item (JDfby outputting of the data carrier 
identification information item (*D)~and of the associated second key information 
item (K2) to the modification device-^); 

checking of the association of the first key information item fK4)-stored in the 
data carrier (S)-with the second key information item (K2) in the data carrier (S)-that 
was output to the data carrier (Sfby the modification device ££}~and 5 if the result of 
the check is positive; 

allowing of the modification of the application (AL A2, A3, A4) in the data 
carrier (S)-by the modification device-^). 

2. (Currently Amended) A granting method (B)-as claimed in claim 1, wherein 
the modification right gives the right to install and/or update and/or delete the 
application (Al, A2, A3, A4) in the data carrier-{S). 

3. (Currently Amended) A granting method (E)-as claimed in claim 1, wherein 
the modification right only gives the right to modify a specific application (A 1 , A2, 
A3, A4) in the data carrier-{S). 

4. (Currently Amended) A granting method (E)-as claimed in claim 1, wherein 
the modification right only gives the right to install an application (Al, A2, A3, A4) 
requiring a predefined maximum amount of storage space in the data carrier^S). 
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5. (Currently Amended) A granting method (B)-as claimed in claim 1, wherein 
the data carrier identification information item (4©>-identifies a group of data carriers 

6. (Currently Amended) A granting method {E}-as claimed in claim 1, wherein 
the modification right also determines the access rights of the application (Al, A2, 
A3, A4) that is to be modified in the data carrier (S)-to storage areas and interfaces £H 
4. II) of the data carrier-{S). 

1. (Currently Amended) A granting method (E)-as claimed in claim 1, wherein 
the following further steps are carried out: 

generation of a first master key information item (MKI1) and of an associated 
second master key information item (MKI2) for one or more data carriers (S) 
identified by a data carrier identification information item (ID) , wherein the 
modification of access rights in the data carrier (S)-and/or the generation of further 
key information items in the data carrier (S)-and the modification device (§}-is 
possible only with the first master key information item (MKI 1) stored in the data 
carrier (S)~and only with the second master key information item (MKI2) stored in the 
modification device-{£). 

8. (Currently Amended) A granting method (E}~as claimed in claim 7, wherein 
the first master key information item (MK11) and the associated second master key 
information item (MKI2) only make it possible to modify access rights of a specific 
application (Al, A2, A3, AA) in the data carrier £S)-and/or to generate further key 
information items in the data carrier (S)-and the modification device (£)-in order to 
modify a specific application (Ah A2. A3, A4) . 

9. (Currently Amended) A granting method (E)-as claimed in claim 1, wherein 
modification of the application ( Al, A2, A3, A4) in the data carrier (S)-by the 
modification device (£)-of the data carrier (S)-is only permitted when specific 
properties of the application (A 1. A2, A3, A4) that is to be modified are determined. 
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10. (Currently Amended) A data carrier fS)-for running at least one application 
(A 1 ; A2, A3, A1) , having 

at least one interface (3, 4^ 11) for the contactless and/or contact 
communication of information items, and having 

computer means (6}-for running the at least one application (Al, A2, A3, A 4 ) , 
where information items communicated via the interfaces (3, 4 , 11) or information 
items stored in the data carrier fS)-are processed, and having 

storage means (8}-for storing a first key information item and an associated 
data carrier identification information item (4©}-that identifies the data carrier-(S), and 
having 

checking means (6, A S ) for checking a modification right of a modification 
device (£)-to modify an application (Al, A2, A3, A4) in the data carrier (S)-via the 
interface (3, 4, 1 1) , where the checking means (6 , AS) are designed to check the 
association of the first key information item (K 1 ) stored in the storage means f8)-with 
the second key information item (K2) output to the data carrier fS)-by the 
modification device-(S), and having 

modification means (6)-which, following confirmation of the modification 
right of the modification device (§>by the checking means (6, AS) , are designed to 
enable modification of the application (AL A2, A3, A4) in the data carrier (S>by the 
modification device-(5). 

1 1 . (Currently Amended) A data carrier (S)-as claimed in claim 1 0, wherein the 
checking means (6, AS) are designed to confirm a restricted modification right which 
only gives the right to install and/or update and/or delete the application (Al, A2, A3, 
A4)-in the data carrier-(S). 



12. (Currently Amended) A data carrier (S)-as claimed in claim 10, wherein the 
checking means (6, AS) are designed to confirm a restricted modification right which 
only gives the right to modify a specific application (Al, A2, A3, Al) in the data 
carrier-(S). 

13. (Currently Amended) A data carrier (S}-as claimed in claim 10, wherein the 
checking means (6, AS) are designed to confirm a restricted modification right which 
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only gives the right to install an application (Al, A2, A3, A4) requiring a predefined 
maximum amount of storage space in the data carrieMS). 

14. (Currently Amended) A data carrier (S)-as claimed in claim 10, wherein the 
checking means (6, AS) are designed to confirm a modification right which 
determines the access rights of the application (Al A2, A3, A4) that is to be modified 
in the data carrier (S)-to storage areas of the storage means £?)-and interfaces (3 , 4 , 
44>-of the data carrier-fS). 

15. (Currently Amended) A data carrier (S>-as claimed in claim 10, wherein the 
computer means (6)-are designed to run an application (Al, A2, A3, A4) formed by a 
Java applet. 

16. (Currently Amended) A modification device (§>for modifying an application 
(Al, A2 ? A3, A4) in a data carrier-(S), having 

at least one interface (43>for the contactless and/or contact communication of 
information items to a data carrier (S)-identified by a data carrier identification 
information item-fl©), and having 

storage means for storing at least one data carrier identification information 
item (ID) that identifies a data carrier-(S), and an associated second key information 
item-£K5), and having 

computer means (4-3}-for modifying applications (A l, A2, A3, A 4 ) in data 
carriers (S)-via the interface (43)-where, in the course of communication with a data 
carrier (S)-identified by a stored data carrier identification information item (ID) , the 
modification right of the modification device {5}-is output to the data carrier fS)-by 
communication of the second key information item £K3)-associated with this data 
carrier identification information item-(4D), whereupon, following confirmation of the 
modification right by the data carrier-(S), the modification device f§>is authorized 
and designed to modify the application (Al, A2, A3, Al) in the data carrier-(S). 

17. (Currently Amended) A modification device (5>-as claimed in claim 16, 
wherein the modification device (§)-is formed by an operator computer fl-Q) 
containing the storage means and by a reading device (2)-that is connected to the 
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operator computer £4-©)-over a data network-(N6-F), the reading device (2)-comprising 
the at least one interface (45>-and at least part of the computer means (+5>of the 
modification device-(£). 
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